Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B96/CAD469AAF1D711EA9A5D9381C4F9AE02/7302657CF1D911EAB8116783C4F9AE02.roa
File: 7302657CF1D911EAB8116783C4F9AE02.roa (raw, json)
Hash identifier: R9wY9ED4b9SY03cAJBddJVCRNxbD1bX5Zs/llLVq93c=
Subject key identifier: F8:59:C1:FA:CB:53:92:A8:89:CA:A0:53:34:B3:4A:BF:97:36:8D:62
Certificate issuer: /CN=A9153B96/serialNumber=D81076B9CB37F8902C174D5EF3BFD39AA7E2650E
Certificate serial: 066A
Authority key identifier: D8:10:76:B9:CB:37:F8:90:2C:17:4D:5E:F3:BF:D3:9A:A7:E2:65:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2BB2ucs3-JAsF01e87_TmqfiZQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153B96/CAD469AAF1D711EA9A5D9381C4F9AE02/7302657CF1D911EAB8116783C4F9AE02.roa
Signing time: Thu 22 Jun 2023 22:54:25 +0000
ROA not before: Thu 22 Jun 2023 22:54:24 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153B96/serialNumber=D81076B9CB37F8902C174D5EF3BFD39AA7E2650E
Validity
Not Before: Jun 22 22:54:24 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6494d120-f985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:7c:d9:e3:a8:ab:1d:a8:59:e9:99:18:d3:
48:b7:db:ce:a2:71:a5:6b:9f:42:e8:28:c3:e9:83:
5a:f5:6b:8f:91:33:9e:c7:e6:31:9a:36:bc:8d:89:
34:4c:c6:0c:96:f9:a7:38:c6:56:90:17:ad:38:11:
d3:5f:02:06:cb:2d:a5:84:98:5f:6a:65:2e:87:bd:
fc:aa:47:b5:65:64:57:f2:bb:8b:77:56:61:60:fa:
7b:33:35:58:fc:d3:f6:55:5d:a1:8b:90:d2:52:15:
a0:95:ae:f6:4c:3b:e5:84:01:2d:22:4c:98:1c:17:
4d:85:cf:ea:31:1a:49:d0:1c:8b:52:de:21:2b:ac:
2f:89:de:10:86:45:de:f9:de:26:be:11:f0:22:15:
c7:30:4e:85:c4:a2:44:ad:af:45:b7:a7:e9:84:c5:
1c:c2:07:0c:27:2f:dd:c6:05:f1:3a:db:9c:5f:e8:
a2:79:5f:ac:6f:cb:7f:8b:11:68:1b:8a:b9:4d:f5:
18:d8:95:a9:b7:f8:e6:e3:a7:67:2a:d8:b8:c6:0b:
4a:0c:6b:f8:c7:23:f5:dd:4b:1d:6c:44:f1:82:72:
63:e7:de:b2:cc:ab:49:d8:dd:a4:4b:e7:6e:4a:e1:
1a:d5:d1:07:84:65:b0:86:fc:45:98:ef:f2:0a:18:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:C1:FA:CB:53:92:A8:89:CA:A0:53:34:B3:4A:BF:97:36:8D:62
X509v3 Authority Key Identifier:
keyid:D8:10:76:B9:CB:37:F8:90:2C:17:4D:5E:F3:BF:D3:9A:A7:E2:65:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153B96/CAD469AAF1D711EA9A5D9381C4F9AE02/2BB2ucs3-JAsF01e87_TmqfiZQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2BB2ucs3-JAsF01e87_TmqfiZQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B96/CAD469AAF1D711EA9A5D9381C4F9AE02/7302657CF1D911EAB8116783C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/22
103.57.236.0/22
Signature Algorithm: sha256WithRSAEncryption
02:57:63:ec:7d:dd:35:8f:bd:02:92:bb:87:27:69:a1:3f:33:
66:2c:ba:b5:2d:20:88:15:33:23:eb:1b:a9:26:72:3e:cd:d7:
3c:54:57:41:52:3e:56:88:d9:cd:58:9c:e3:91:7e:9e:f6:42:
5c:82:94:0d:2c:6e:98:39:b9:a4:7d:81:ff:71:5d:af:c8:cb:
e2:59:ba:4a:6a:d7:7c:d6:59:69:25:d6:19:6a:64:83:6e:d3:
55:4e:b8:94:be:bb:15:02:c0:11:2c:be:9b:93:72:d3:8e:f7:
7d:53:e2:3d:80:40:53:04:97:75:2a:75:d1:0b:fb:30:51:8e:
ef:62:d1:8b:f4:59:5b:9a:da:b1:a7:9b:98:b4:a6:0a:1b:28:
12:b3:1d:32:06:01:f5:59:9e:32:4c:72:cf:b8:61:3e:42:bd:
af:57:02:a2:f9:9d:8c:50:77:4d:0c:07:a9:e2:7b:02:e6:58:
30:56:01:4b:51:da:2b:2c:4c:d2:ad:75:7a:cf:89:7f:3f:d2:
4a:f4:4f:90:9f:85:c7:45:48:38:93:26:4b:5e:72:62:8e:5d:
2f:f8:45:d6:77:4f:21:f3:68:98:a9:96:d9:a4:1f:f9:ad:2b:
66:54:26:cb:d5:70:e4:9e:1c:9b:b9:e5:68:a7:17:8d:70:5c:
ef:ca:38:70
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNCOTYxMTAvBgNVBAUTKEQ4MTA3NkI5Q0IzN0Y4OTAyQzE3NEQ1RUYzQkZEMzlB
QTdFMjY1MEUwHhcNMjMwNjIyMjI1NDI0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDk0ZDEyMC1mOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Hx82eOoqx2oWemZGNNIt9vOonGla59C6CjD6YNa9WuPkTOex+Yxmja8jYk0
TMYMlvmnOMZWkBetOBHTXwIGyy2lhJhfamUuh738qke1ZWRX8ruLd1ZhYPp7MzVY
/NP2VV2hi5DSUhWgla72TDvlhAEtIkyYHBdNhc/qMRpJ0ByLUt4hK6wvid4QhkXe
+d4mvhHwIhXHME6FxKJEra9Ft6fphMUcwgcMJy/dxgXxOtucX+iieV+sb8t/ixFo
G4q5TfUY2JWpt/jm46dnKti4xgtKDGv4xyP13UsdbETxgnJj596yzKtJ2N2kS+du
SuEa1dEHhGWwhvxFmO/yChhCOwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPhZwfrL
U5KoicqgUzSzSr+XNo1iMB8GA1UdIwQYMBaAFNgQdrnLN/iQLBdNXvO/05qn4mUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0I5Ni9DQUQ0NjlBQUYx
RDcxMUVBOUE1RDkzODFDNEY5QUUwMi8yQkIydWNzMy1KQXNGMDFlODdfVG1xZmla
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJCQjJ1Y3MzLUpBc0YwMWU4N19UbXFmaVpRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTNCOTYvQ0FENDY5QUFGMUQ3MTFFQTlBNUQ5MzgxQzRGOUFFMDIvNzMwMjY1N0NG
MUQ5MTFFQUI4MTE2NzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAItdcgDBAJnOewwDQYJKoZIhvcNAQELBQADggEBAAJXY+x9
3TWPvQKSu4cnaaE/M2YsurUtIIgVMyPrG6kmcj7N1zxUV0FSPlaI2c1YnOORfp72
QlyClA0sbpg5uaR9gf9xXa/Iy+JZukpq13zWWWkl1hlqZINu01VOuJS+uxUCwBEs
vpuTctOO931T4j2AQFMEl3UqddEL+zBRju9i0Yv0WVua2rGnm5i0pgobKBKzHTIG
AfVZnjJMcs+4YT5Cva9XAqL5nYxQd00MB6niewLmWDBWAUtR2issTNKtdXrPiX8/
0kr0T5CfhcdFSDiTJktecmKOXS/4RdZ3TyHzaJipltmkH/mtK2ZUJsvVcOSeHJu5
5WinF41wXO/KOHA=
-----END CERTIFICATE-----
Generated at Wed Sep 6 05:40:08 2023 by rpki-client on console-fra.rpki-client.org